(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 
International Bureau 

(43) International Publication Date 
2 August 2001 (02.08.2001) 




PCT 



i urn uiiiiii i! nun mil ifii f n jii iflii inn uni [jiij [in muff fin nil mi 

(10) International Publication Number 

WO 01/56321 Al 



(51) International Patent Classification 7 : H04Q 7/38 

(21) International Application Number: PCT/FI0 1/00062 

(22) International Filing Date: 24 January 2001 (24.01 .2001) 

(25) Filing Language: English 

(26) Publication Language: English 



(30) Priority Data: 

20000149 



26 January 2000 (26.0 1 .2000) FI 



(71) Applicant (for all designated States except US): NOKIA 
MOBILE PHONES LTD [FI/FI]; Keilalahdentie 4, FIN- 
02150 Espoo (FI). 

(72) Inventor; and 

(75) Inventor/Applicant (for US only): VANTTINEN, Veijo 
[FI/FI]; Mustarinne 8, FIN-02770 Espoo (FI). 



(74) Agent: KOLSTER OY AB; Iso Roobertinkatu 23, P.O. 
Box 148, FIN-00121 Helsinki (FI). 

(81) Designated States (national): AE, AG, AL, AM, AT, AT 
(utility model), AU, AZ, BA, BB, BG, BR, BY, BZ, CA, 
CH, CN, CR, CU, CZ, CZ (utility model), DE, DE (utility 
model), DK, DK (utility model), DM, DZ, EE, EE (utility 
model), ES. FT, FI (utility model), GB, GD, GE, GH, GM, 
HR, HU. ID, IL, IN, IS, JP. KE, KG, KP, KR, KZ, LC, LK, 
LR, LS, LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, 
MZ, NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SK 
(utility model), SL, TJ, TM. TR, TT, TZ, UA, UG, US, UZ, 
VN, YU, ZA, ZW. 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZW), Eurasian 
patent (AM, AZ, BY KG, KZ, MD, RU, TJ, TM), European 
patent (AT, BE, CH, CY, DE, DK, ES, FI, FR, GB, GR, IE, 
IT, LU, MC, NL, PT, SE, TR), OAPI patent (BF, BJ, CF, 
CG, CI, CM, GA, GN, GW, ML, MR, NE, SN, TD, TG). 

[Continued on next page] 



|H (54) Title: LOCATION OF SUBSCRIBER TERMINAL IN PACKET- SWITCHED RADIO SYSTEM 



^ 300 START ^ 



1 


f 


302 SUBSCRIBER TERMINAL TRANSMITS REQUEST 
MESSAGE FOR LOCATION SERVICE TO CORE NETWORK 
VIA RADIO NETWORK 







304 PERFORMING AT LEAST ONE LOCATION SERVICE 
FUNCTION REQUIRED IN REQUEST MESSAGE 



(57) Abstract: The invention relates 
to a packet-switched radio system and 
to a method of performing a function of 
the subscriber terminal location service 
in a packet-switched radio system. The 
method comprises the (302) subscriber 
terminal transmitting a request message 
for location service to the core network 
of the radio system via the radio system; 
(304) performing at least one function 
of the location service required in the 
request message; (306) the core network 
transmitting a response message to 
the subscriber terminal via the radio 
network. 



306 CORE NETWORK TRANSMITS A RESPONSE MESSAGE 
TO SUBSCRIBER TERMINAL VIA RADIO NETWORK 



WO 01/56321 Al 

For two-tetter codes and other abbreviations, refer to the "Guid- 
ance N otes on Codes and Abbreviations " appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



Published: 

— with international search report 



WO 01/56321 



PCT/FI0 1/00062 



1 

Location of subscriber terminal in packet-switched radio 

SYSTEM 

FIELD 

The invention relates to a method of performing a function of the 
5 subscriber terminal location service in a packet-switched radio system, and to 
a packet-switched radio system employing the method. 

BACKGROUND 

Location of a subscriber terminal, i.e. determination of the geo- 
graphical location of a subscriber terminal, is an important function in cellular 

10 radio networks. In the United States a federal authority (Federal Communica- 
tion Commission FCC) requests that one should be able to locate all sub- 
scriber terminals that make emergency calls even with accuracy of 50 metres. 
Location can also be used for commercial purposes, e.g. for defining various * 
tariff areas or for implementing a navigation service which guides the user. So 

15 far the location service (LCS) has been mainly developed for circuit-switched 
cellular radio networks, such as the GSM system (Global System Mobile 
Communications). 

Various methods are used for implementing the location service. At 
the least accurate level the location of a subscriber terminal can be deter- 

20 mined on the basis of the identity of the cell that serves the subscriber termi- 
nal. This does not provide very accurate information because the diameter of a 
cell can be dozens of kilometres. 

A more accurate result is obtained by using timing information on 
the radio connection as additional information, e.g. the timing advance TA. In 

25 the GSM system the TA provides the location of a subscriber terminal with ac- 
curacy of approximately 550 metres. The problem is that if the cell is imple- 
mented with an omnidirectional antenna, the location of a subscriber terminal 
with respect to a base station is known only on the circumference drawn 
around the base station. A base station divided into three sectors, for example, 

30 slightly improves the situation, but even in that case it can only be determined 
that the subscriber terminal is located in a 120° sector in an area with a depth 
of 550 metres at a certain distance from the base station. 

These inaccurate methods are adequate for some applications, e.g. 
for determining tariff areas. More accurate methods have also been devel- 

35 oped. These methods are usually based on various base stations measuring a 
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signal transmitted by a subscriber terminal. One example of such methods is 
the TOA method (Time of Arrival). 

The subscriber terminal can also measure signals transmitted by 
various base stations. An example of such a method is the E-OTD method 
5 (Enhanced Observed Time Difference). In synchronized networks the sub- 
scriber terminal measures the ratios between the reception moments of the 
signals it has received from different base stations. In non-synchronized net- 
works the signals transmitted by the base stations are also received by a loca- 
tion measurement unit LMU placed at a known and fixed measurement point. 

10 The location of the subscriber terminal is determined on the basis of geometri- 
cal components obtained from time delays. 

Another location method is to use a GPS receiver (Global Position- 
ing System) arranged in a subscriber terminal. The GPS receiver receives a 
signal transmitted by at least four earth-orbiting satellites, and the latitude, 

15 longitude and altitude of the location of the subscriber terminal can be calcu- 
lated on the basis of these signals. The subscriber terminal either determines 
the location independently or it is assisted in the determination. The network 
part of the radio system may send an assistance message to the subscriber 
terminal, which speeds up the location process, i.e. the power consumption of 

20 the subscriber terminal decreases. The assistance message may contain the 
time, a list of visible satellites, Doppler shift of the satellite signal and a search 
window for the code phase. The subscriber terminal can send the information 
it has received to the network part, in which the location is calculated. In this 
application the network part of the radio system refers to the fixed part of the 

25 radio system, i.e. to the whole system except for the subscriber terminal. 

In packet-switched radio systems, like in the GPRS (General Packet 
Radio Service) or in the EGPRS (Enhanced General Packet Radio Service), 
very little attention has been paid to the implementation of the location service. 
The EGPRS is a GSM-based (Global System for Mobile Communications) 

30 system which utilizes packet-switched transmission. The EGPRS employs the 
EDGE (Enhanced Data Rates for GSM Evolution) technique for increasing the 
data transmission capacity. In addition to the GMSK modulation (Gaussian 
Minimum-Shift Keying) normally used in the GSM, the 8-PSK modulation (8- 
Phase Shift Keying) can also be applied to packet data channels. The main 

35 object is to provide non-real-time data transmission services, such as copying 
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of files and use of an Internet browser, but also packet-switched real time ser- 
vices for transmission of speech and video, for example. 

In packet-switched radio systems the location methods described 
above require a packet-switched transmission connection between the core 
5 network of the radio system and the subscriber terminal for transmitting the 
necessary information. The signalling traffic needed is rather heavy and slow. 
In time critical applications it would, however, be important to receive the loca- 
tion of the subscriber terminal fast from the location service. 

BRIEF DESCRIPTION OF THE INVENTION 

10 An object of the invention is to provide an improved method of per- 

forming a function of the subscriber terminal location service in a packet- 
switched radio system. According to an aspect of the present invention, there 
is provided a method of claim 1 of locating a subscriber terminal in a packet- 
switched radio system. According to another aspect of the invention, there is 

15 provided a packet-switched radio system of claim 18. The preferred embodi- 
ments of the invention are disclosed in the dependent claims. 

The invention is based on adding information needed by a function 
of the location service to a request message or to a new response message. 

Several improvements are achieved with the method and apparatus 

20 of the invention: the location method becomes faster, in certain cases no 
packet-switched transmission connection needs to be established at all, and 
the amount of signalling needed decreases. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention will be described in greater detail by means of pre- 
25 ferred embodiments with reference to the accompanying drawings, in which 

Figure 1A shows an example of the structure of a cellular radio net- 
work; 

Figure 1B is a block diagram illustrating the cellular network in 
greater detail; 

30 Figure 1C illustrates a circuit-switched connection; 

Figure 1D illustrates a packet-switched connection; 

Figure 2 shows an example of protocol stacks used in certain parts 
of the cellular radio network; 

Figure 3 is a flow chart illustrating a method of performing a function 
35 of the subscriber terminal location service; 
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4 

Figure 4 is a signal sequence chart related to Figure 3 illustrating an 
example of the performance of the location function. 

DESCRIPTION OF EMBODIMENTS 

The typical structure of a packet-switched radio system and its con- 
5 nections to a public switched telephone network and packet transmission net- 
work will be described with reference to Figures 1 A and IB. Figure 1B includes 
only the blocks necessary for describing the embodiments, but it is clear to a 
person skilled in the art that a conventional packet-switched cellular radio net- 
work also comprises other functions and structures that need not be described 

10 in greater detail here. The radio system may be e.g. the GSM-based GPRS or 
EGPRS system, the universal mobile telephone system UMTS, which utilizes 
the wideband code division multiple access method, or an intermediate form of 
these systems, in which the structure of the radio network is similar to that of 
the UMTS and which is called e.g. GERAN (GSM Enhanced Radio Access 

15 Network). In such a system the radio interface is, however, a normal GSM- 
based radio interface or a radio interface which uses EDGE modulation. 

The description of Figures 1 A and 1B is mainly based on the UMTS. 
The main parts of the mobile communications system are a core network CN, 
an UMTS terrestrial radio access network, i.e. the radio network UTRAN, and 

20 user equipment UE. The interface between the CN and the UTRAN is called 
lu, and the air interface between the UTRAN and the UE is known as Uu. 

The UTRAN consists of radio network subsystems RNS. The inter- 
face between the RNSs is called lur. The RNS consists of a radio network con- 
troller RNC and of one or more B nodes. The interface between the RNC and 

25 the B is called lub. The coverage area of the B node, i.e. a cell, is marked with 
C is Figure 1B. The more conventional name, i.e. base station system BSS, 
can also be used for the RNS. The network part of the radio system thus com- 
prises the radio network UTRAN and the core network CN. 

The illustration of Figure 1A is very abstract, and thus it is specified 

30 in Figure 1B by showing which part of the GSM system approximately corre- 
sponds to which part of the UMTS. It should be noted that the description is 
not limiting but only indicative because the responsibilities and functions of the 
different parts of the UMTS are still under design. 

The subscriber terminal 150 may be fixed, placed in a vehicle or a 

35 portable terminal. The infrastructure of the radio network UTRAN consists of 
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radio network subsystems RNS, i.e. base station systems. The radio network 
subsystem RNS consists of radio network controllers RNC, i.e. of a base sta- 
tion controller 102 and of at least one B node, i.e. a base station 100, con- 
trolled by it. 

5 The base station B contains a multiplexer 116, transceivers 114 and 

a control unit 118, which controls the function of the transceivers 114 and the 
multiplexer 116. The multiplexer 116 is used for arranging the traffic and con- 
trol channels used by several transceivers 114 on one transmission connec- 
tion 160. 

10 From the transceivers 114 of the base station B there is a connec- 

tion to an antenna unit 112, which establishes a bi-directional radio connection 
Uu to the subscriber terminal 150. The structure of the frames to be transmit- 
ted on the bi-directional radio connection Uu is strictly defined. 

The base station controller RNC comprises a switching field 120 

15 and a control unit 124. The switching field 120 is used for switching speech 
and data and for connecting signalling circuits. A base station system formed 
by the base station B and the base station controller RNC also includes a 
transcoder 122. The division of tasks between the base station controller RNC 
and the base station B and the physical structure may vary according to the 

20 application. Typically the base station B implements the radio path as de- 
scribed above. The base station controller RNC is typically responsible for the 
following: radio resource management, handover control, power control, tim- 
ing, synchronization and paging of a subscriber terminal. 

The transcoder 122 is usually located as close to a mobile services 

25 switching centre 132 as possible because this saves transmission capacity 
when speech is transmitted in the format of a cellular radio network between 
the transcoder 122 and the base station controller RNC. The transcoder 122 
converts the different digital speech encoding formats used between the public 
switched telephone network and the radio telephone network into a compatible 

30 format, e.g. from the 64 kbits/s format of the fixed network into a format of the 
cellular radio network (e.g. 13 kbit/s), and vice versa. The devices needed are 
not described in greater detail here, but it should be noted that other data than 
speech are not converted in the transcoder 122. The control unit 124 is re- 
sponsible for call controlling, mobility management, collection of statistics and 

35 signalling. 
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The core network CN consists of infrastructure belonging to a mo- 
bile communications system external to the UTRAN. Figure 1B illustrates a 
mobile services switching centre 132, which is one of the devices belonging to 
circuit-switched transmission of the core network CN. 
5 As is seen in Figure 1B, the switching field 120 can establish con- 

nections (illustrated with black dots) both to a public switched telephone net- 
work PSTN 134 via the mobile services switching centre 132 and to a packet 
transmission network 142. In the public switched telephone network 134 a 
typical terminal 136 is a conventional telephone or an ISDN telephone (Inte- 

10 grated Services Digital Network). Packet transmission is performed from a 
computer 148 connected to the mobile communication system via the Internet 
146 to a portable computer 152 connected to the subscriber terminal 150. A 
WAP phone (Wireless Application Protocol) can also be used instead of the 
combination of the subscriber terminal 150 and the portable computer 152. 

15 The connection between the packet transmission network 142 and 

the switching field 120 is established by a support node 140 (SGSN = Serving 
GPRS Support Node). The function of the support node 140 is to transmit 
packets between the base station system and a gateway node (GGSN = 
Gateway GPRS Support Node) 144 and keep a record of the location of the 

20 subscriber terminal 150 in its area. 

The gateway node 144 connects a public packet transmission net- 
work 146 and the packet transmission network 142. An Internet protocol or an 
X.25 protocol can be used at the interface. The gateway node 144 hides the 
internal structure of the packet transmission network 142 from the public 

25 packet transmission network 146 by encapsulating the structure, and thus the 
public packet transmission network 146 regards the packet transmission net- 
work 142 as a sub-network which comprises a subscriber terminal 150 to 
which the public packet transmission can send packets and receive packets 
from it. 

30 The packet transmission network 142 is typically a private network 

which utilizes the Internet protocol and carries signalling and user data. The 
structure of the network 142 may vary according to the operator in respect of 
its architecture and protocols below the Internet protocol layer. 

The public packet transmission network 146 may be e.g. the world- 

35 wide Internet network, there being a terminal 148, e.g. a server computer, 
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connected to the Internet which wants to transmit packets to the subscriber 
terminal 150. 

Figure 1C illustrates how a circuit-switched connection is estab- 
lished between the subscriber terminal 150 and the terminal 136 of the public 
5 switched telephone network. The bold line in the figures illustrates how data 
passes through the system at the air interface 1 70 from the antenna 1 12 to the 
transceiver 114 and from the transceiver in a form multiplexed in the multi- 
plexer 116 over a transmission connection 160 to the switching field 120, 
where a connection is established to the output towards the transcoder 122, 

10 and further to the terminal 136 connected to the public switched telephone 
network 134 through switching performed at the mobile services switching 
centre 132. In the base station 100 the control unit 1 18 controls the multiplexer 
116 in performing of transmission, and in the base station controller 102 the 
control unit 124 controls the switching field 120 in performing of correct switch- 

15 ing. 

Figure 1D illustrates a packet-switched transmission connection. A 
portable computer 152 is connected to the subscriber terminal 150. The bold 
line describes how the data to be transmitted is carried from the server com- 
puter 148 to the portable computer 152. Information can naturally also be 

20 transmitted in the opposite transmission direction, that is, from the portable 
computer 152 to the server computer 148. Data passes through the system at 
the air interface, i.e. at the Urn interface 170, from the antenna 112 to the 
transceiver 114 and from the transceiver in a form multiplexed in the multi- 
plexer 116 over a transmission connection 160 at the Abis interface to the 

25 switching field 120, where a connection is established to the output towards 
the support node 140 at the Gb interface. From the support node 140 the data 
is transmitted along the packet transmission network 142 via the gateway 
node 144 to the server computer 148 connected to the public packet transmis- 
sion network 146. 

30 For the sake of clarity Figures 1C and 1D do not illustrate a case in 

which both circuit-switched and packet-switched data are transmitted at the 
same time. This is, however, feasible as well as common since capacity freed 
from transmission of circuit-switched data can be flexibly used for packet- 
switched transmission. It is also possible to build a network on which only 

35 packet-switched data is transmitted, i.e. no circuit-switched data. In that case 
the network structure can be simplified. 
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We will now return to Figure 1D. The different entities of the UMTS 
system, i.e. CN, UTRAN, RNS, RNC, B, are illustrated with broken line boxes 
in the figure. Devices of the core network CN that belong to packet-switched 
transmission will also be described in greater detail. In addition to the support 
5 node 140, packet transmission network 142 and gateway node 144 t the core 
network comprises a gateway mobile location centre GMLC 186 and a home 
location register HLR 184. The function of the gateway mobile location centre 
is to offer the requested service to an outside client 188 of the location service. 
The home location register 184 includes subscriber data of the location service 

10 and routing information. 

Figure 1D shows a serving mobile location centre 182, which is one 
of the devices needed by the location service and may be located, as shown, 
in the base station controller RNC, e.g. in its control part 124, or which may be 
a separate device connected either to the base station controller RNC or to the 

15 support node 140. The figure also shows a location measurement unit LMU 
180, which may be in the base station B, e.g. in its control part 118, or which 
may be a separate device connected to the base station B. The function of the 
location measurement unit 180 is to perform any radio measurements needed 
in the location method. 

20 Figure 1 D also shows those structural parts of the subscriber termi- 

nal UE that are relevant to the present embodiment. The subscriber terminal 
UE comprises an antenna 190, via which a transceiver 192 receives a signal 
from the radio path 170. The function of the subscriber terminal UE is con- 
trolled by a control part 194, which is typically a microprocessor provided with 

25 the necessary software. The protocol procedures to be described later are 
also performed by this software. In addition to the above-mentioned parts, the 
subscriber terminal UE comprises a user interface, which typically consists of 
a loudspeaker, microphone, screen and keyboard, and a battery. These are 
not described more closely because they are irrelevant to the present inven- 

30 tion. 

Neither the structure of the transceiver in the base station B nor the 
structure of the transceiver in the subscriber terminal UE is described more 
closely because it is clear to a person skilled in the art how these devices are 
implemented. For example, a normal radio network transceiver and a sub- 
35 scriber terminal transceiver in accordance with the EGPRS can be used. The 
only thing that is important to the present embodiment is that the radio connec- 
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tion 170 can be implemented, since the function required by the application is 
performed at upper levels of the OSI model (Open Systems Interconnection), 
particularly in the third layer. 

Figure 2 illustrates control plane protocol stacks of the EGPRS. It 
5 should be noted that the embodiments are not limited to the EGPRS. The pro- 
tocol stacks have been formed according to the OSI model (Open Systems 
Interconnection) of the ISO (Internationa! Standardization Organization). In the 
OSI model protocol stacks are divided into layers. In principle, there may be 
seven layers. Figure 2 shows which protocol sections are processed in each 

10 network element. The network elements illustrated in the figure are a sub- 
scriber terminal MS, a base station system BSS, a support node SGSN and a 
gateway node GGSN. The base station and the base station controller are not 
illustrated separately because an interface has not been defined between 
them. In principle, the protocol handling defined for the base station system 

15 BSS can be divided freely between the base station 100 and the base station 
controller 102, but in practice not between the transcoder 122, even though it 
belongs to the base station system BSS. Different network elements are sepa- 
rated by interfaces Urn, Gb and Gn between them. 

The layer in each device MS, BSS, SGSN, GGSN communicates 

20 logically with a layer in another device. Only the lowest physical layers com- 
municate directly with one another. The other layers always use the services 
provided by the next lower layer. Thus a message has to physically travel in 
the vertical direction between the layers, and only in the lowest layer the mes- 
sage travels in the horizontal direction between the layers. 

25 The actual bit-level data are . always transmitted using the first 

physical layer RF, L1. The mechanical, electric and functional properties 
needed to access a physical transmission path are defined in the physical 
layer. The second layer, i.e. the data link layer, uses the services of the physi- 
cal layer to provide reliable data transmission, and corrects e.g. transmission 

30 errors. At the air interface 170 the data link layer is divided into an RLC/MAC 
sub-layer and an LLC sub-layer. The third layer, i.e. the network layer, pro- 
vides the upper layers with independence from data transmission and switch- 
ing techniques, which are used for establishing a connection between the de- 
vices. The network layer is responsible for establishment, maintenance and 

35 release of a connection, for example. In the GSM the network layer is also 
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called a signalling layer. It has two main functions: it routes messages and en- 
ables several independent connections between two entities at the same time. 

The network layer comprises a session management SM sub-layer 
and a GPRS mobility management GMM sub-layer. 
5 The mobility management sub-layer GMM takes the consequences 

that result from the fact that the user of the subscriber terminal moves and are 
not directly related to the management of radio resources. In the fixed network 
this sub-layer would check the user's rights and connect the user to the net- 
work. In cellular radio networks this sub-layer thus supports user mobility, reg- 
10 istration and management of mobility data. This sub-layer also checks the 
identity of the subscriber terminal and the identities of allowed services. In this 
sub-layer messages are transmitted between the subscriber terminal MS and 
the support node SGSN. 

The session management sub-layer SM manages all functions re- 
15 lated to the management of a packet-switched call but it does not detect user 
mobility. The session management sub-layer SM establishes, maintains and 
releases connections. It has separate procedures for calls originating from the 
subscriber terminal 150 and for calls terminating to the subscriber terminal. In 
this sub-layer messages are also transmitted between the subscriber terminal 
20 MS and the support node SGSN. 

In the base station system BSS the messages of the session man- 
agement sub-layer SM and, the mobility management sub-layer GMM are 
processed transparently, i.e. they are only transferred to and fro. 

The LLC layer (Logical Link Control) provides a reliable logical en- 
25 cryption link between the SGSN and the MS. The LLC is independent of the 
lower layers, which allows to minimize the effect of changes in the air interface 
on the network part of the mobile communications network. The information to 
be transmitted and the user data are encrypted. Between the Urn and the Gb 
interfaces the LLC data is transmitted at the relaying level LLC RELAY of the 
30 LLC. 

The MAC level (Medium Access Control) is responsible for the fol- 
lowing tasks: multiplexing of data and signalling both in the uplink (from the 
subscriber terminal towards the network part) and in the downlink (from the 
networks part towards the subscriber terminal), management of resource re- 
35 quests in the uplink and allocation of resources and timing of traffic in the 
downlink. Management of traffic prioritization also belongs to this level. The 
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RLC level (Radio Link Control) transmits data of the LLC level, i.e. LLC 
frames, to the MAC level; the RLC splits the LLC frames into RLC data blocks, 
which it transmits to the MAC layer. In the uplink direction the RLC forms LLC 
frames from the RLC data blocks and transmits them to the LLC layer. The 
5 physical level is implemented with a radio connection at the Um interface, e.g. 
at the air interface defined for the GSM. At the physical level the following 
tasks, for example, are performed: modulation of the carrier wave, interleaving 
and error correction of the data to be transmitted, synchronization, and power 
control of the transmitter. 

10 The GPRS tunnelling protocol GTP tunnels the signalling along the 

trunk network between different SGSNs and GGSNs. If desired, the GTP can 
control the flow between the SGSN and the GGSN. 

The user datagram protocol UDP transmits the GTP layer data 
packets whose protocol does not require a reliable link, e.g. when the Internet 

15 protocol IP is used. At the user level a TCP (Transmission Control Protocol) 
could also be used, which controls the flow of the packets transmitted via it 
and protects them against disappearance and corruption. The UPD protects 
the packets only against corruption. 

The IP is a trunk network protocol of the GPRS, which routes user 

20 data and control data. The IP may be based on the IPv4 protocol, but in a later 
phase this will be replaced with the Ipv6 protocol. 

In addition to the upper level data, the BSSGP plane (Base Station 
Subsystem GPRS Protocol) carries information on routing and quality of ser- 
vice between the BSS and the SGSN. This information is physically carried by 

25 the FR level (Frame Relay). The NS (Network Service) transmits the mes- 
sages in accordance with the BSSGP protocol. 

In the following, we will exemplify with reference to Figures 3 and 4 
how a function of the subscriber terminal location service is performed when 
the subscriber terminal requests it. Figure 3 is a flow chart illustrating the func- 

30 tions to be performed in the basic method, and Figure 4 is a signal sequence 
chart illustrating different embodiments of the method. 

The method starts in block 300. In block 302 the subscriber terminal 
MS sends a request message 400 for location service via the radio network, 
which is the base station system BSS in our example, to the core network, 

35 which is the support node SGSN in our example. If desired, security proce- 
dures can be performed after this, e.g. identification of the subscriber terminal, 
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according to the prior art. For the sake of clarity, these security procedures are 
not shown in Figures 3 and 4. 

Next at least one function of the location service requested in the 
message 400 is performed according to block 304. The request message re- 
5 lates to one of the following location service functions: determination of the 
subscriber terminal location, informing an outside client of the radio system of 
the subscriber terminal location, transmission of location assistance data to 
the subscriber terminal, or transmission of a ciphering key for decrypting the 
location assistance data to the subscriber terminal. 

10 Determination of the subscriber terminal location means that the 

geographical location of the subscriber terminal is found out and given as lon- 
gitude or latitude, for example. The location is needed by the subscriber termi- 
nal, i.e. its user, or by an outside client of the location service in the radio sys- 
tem. The route travelled by the subscriber terminal is traced so that the sub- 

15 scriber terminal at regular intervals sends a message to the core network re- 
questing determination of the location of the subscriber terminal. 

The location assistance data refers e.g. to the assistance message 
which was described at the beginning and includes information on how the 
GPS system can be used more efficiently. Such assistance messages can be 

20 sent on the broadcast channel of the system and their use is chargeable. For 
this reason, the assistance messages can be encrypted, in which case the 
subscriber terminal has to request a ciphering key for decrypting the mes- 
sages from the network. 

Information of various kinds can be inserted into the request mes- 

25 sage 400. The information included in the request message 400 comprises the 
identity of the serving cell, and/or timing information on the radio connection 
and/or other information on the radio system or the subscriber terminal, and/or 
the desired quality of service of the requested location service, and/or the tele- 
communications address, e.g. the IP address, of the outside client who wants 

30 location information on the subscriber terminal. The timing information includes 
a timing advance factor or the round trip time. The other information that can 
be used includes at least one of the following parameters: receiving power of 
the serving cell, receiving power of at least one neighbouring cell, charge level 
of the battery in the subscriber terminal, information on the conditions at the 

35 location of the subscriber terminal, such as the temperature, and identity of a 
separate device connected to the subscriber terminal, such as the IP address. 
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At least part of the information included in the request message re- 
ceived by the core network has been inserted into the request message by the 
subscriber terminal, and/or at least part of the information included in the re- 
quest message received by the core network has been inserted into the re- 
5 quest message by the radio network. 

When the desired function is location of the subscriber terminal, a 
special location procedure is performed. Figure 4 illustrates one example of 
how the location function can be performed. The support node SGSN sends a 
location request 402 to the base station subsystem BSS, which forwards this 

10 request 404 to the location centre SMLC. The network part of the radio sys- 
tem, which is represented by the SMLC in our example, can locate the sub- 
scriber terminal on the basis of the information included in the request mes- 
sage, using e.g. the timing advance factor and the cell identity. 

According to block 406, the network part, i.e. the function in the 

15 SMLC in our example, checks whether the location of the subscriber terminal 
carried out corresponds to the target set for the quality of service. If the target 
set for the quality of service is not achieved, we will move to block 412 accord- 
ing to arrow 410, where the network part performs a location service which 
provides a better quality of service. If the target set for the quality of service 

20 set is achieved, we will move to block 414 according to arrow 508, where a 
message 414 informing the base station system of the location of the sub- 
scriber terminal is sent, and the base station system forwards this information 
416 to the support node SGSN of the core network. 

Initiation of the location service in the subscriber terminal at the 

25 same time as the request message 400 is sent may further performance of the 
location service that provides a better quality of service in block 400. Accord- 
ing to block 412, the communication needed is performed using a packet- 
switched connection between the SMLC, the BSS and the MS so that the loca- 
tion service with a better quality can be performed. The content of the mes- 

30 sages concerned naturally depends on the location method used. The location 
methods described at the beginning, e.g. the TOA method or the E-OTD 
method, can be used, depending on which is supported by the radio system 
and the subscriber terminal. After the location with a better quality has been 
performed, we can return to block 406, where the quality of sen/ice is tested 

35 again. In principle, the quality of the location service can be improved with 
several iteration cycles. In the example of Figure 4 it is assumed that a suffi- 
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cient quality of service is achieved with one iteration cycle, i.e. that if functions 
included in block 412 have been performed, then we will move directly from 
block 412 to transmission of the location information message 414. 

The measures required by the location service with a better quality 
5 include reception of signals in the subscriber terminal, and measurement of 
the signals or transmission of signals from the subscriber terminal. For imple- 
mentation of the location service, the signals to be received in the subscriber 
terminal also comprise signals transmitted by other base stations of the radio 
system than by that of the serving cell, or the signals transmitted by a satellite 

10 of the GPS system. 

After the SGSN has received the message 416 including the loca- 
tion of the subscriber terminal, it transmits this information 418 to the GMLC, 
which sends an acknowledgement message 420. 

Next it is checked in the GMLC in block 422 whether an outside cli- 

15 ent LCS CLIENT of the location service wants to have information on the loca- 
tion of the subscriber terminal, ff an outside client wants the location informa- 
tion, we will move according to arrow 424 to transmission of the message 428 
including the location information to the outside client. 

An outside client of the radio system is informed of the location of 

20 the subscriber terminal by the core network GMLC, by the subscriber terminal 
MS itself, or together by the core network GMLC and the subscriber terminal 
MS. The core network GMLC may independently inform an outside client of 
the location, provided that the GMLC database includes a valid order for this 
information. The subscriber terminal itself may also give the information to a 

25 desired outside party. In that case the subscriber terminal has to establish a 
normal packet-switched transmission connection for transmitting this informa- 
tion. Cooperation between the GMLC and the subscriber terminal can be im- 
plemented e.g. so that the subscriber terminal gives the telecommunications 
address, e.g. the IP address, of the outside client who wants information on 

30 the subscriber terminal location in the request message 400, and having re- 
ceived the location information, the GMLC sends a message 418 including the 
location and the telecommunications address to the client. The message may 
also contain the identity of a separate device connected to the subscriber ter- 
minal, such as the IP address. 

35 After the desired function or functions have been performed, the 

core network SGSN transmits a response message 430 to the request mes- 



WO 01/56321 PCT/FI01/00062 



sage 400 to the subscriber terminal via the radio network. Then the method is 
finished in block 308. The response message contains at least one of the fol- 
lowing pieces of information: the location of the subscriber terminal, location 
assistance data, a ciphering key for decrypting the location assistance data, 
5 an error code, information on whether the subscriber terminal location informa- 
tion is to be supplied to an outside client. The request message and the re- 
sponse message are messages of the protocol layers that correspond to the 
third layer of the OSI model. 

Compared to the prior art, the new features are implemented pref- 

10 erably by software, and thus the location method requires relatively simple 
software changes to precisely defined functions in the core network, radio 
network and subscriber terminal. The subscriber terminal UE comprises 
means 194 for transmitting a request message for location service to the core 
network CN via the radio network RAN. The core network CN comprises 

15 means for performing at least one of the functions required in the request 
message and means for transmitting a response message to the subscriber 
terminal UE via the radio network RAN. The means can also be implemented 
as software to be performed in a general-purpose processor. The invention 
can also be implemented by hardware, e.g. as an ASIC (Application Specific 

20 Integrated Circuit) or as control logic consisting of separate components. 

Even though the invention has bee described with reference to the 
example according to the accompanying drawings, it is clear that the invention 
is not limited thereto but may be modified in various ways within the inventive 
concept disclosed in the appended claims. 



25 
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CLAIMS 

1 . A method of performing a function of the subscriber terminal loca- 
tion service in a packet-switched radio system, characterized by 

(302) the subscriber terminal transmitting a request message for lo- 
5 cation service to the core network of the radio system via the radio network of 
the radio system; 

(304) performing at least one location service function required in 
the request message; 

(306) the core network transmitting a response message to the 
10 subscriber terminal via the radio network. 

2. A method according to claim ^characterized in that the 
request message relates to one of the following location service functions: de- 
termination of the subscriber terminal location, informing of an outside client of 
the radio system of the subscriber terminal location, transmission of location 

15 assistance data to the subscriber terminal, transmission of a ciphering key for 
decrypting the location assistance data to the subscriber terminal. 

3. A method according to any one of the preceding claims, char- 
acterized in that the information included in the request message com* 
prises identity of the serving cell, and/or timing information on the radio con- 

20 nection, and/or other information on the radio system or on the subscriber ter- 
minal, and/or desired quality of service of the requested location service, 
and/or the telecommunications address of the outside client who wants loca- 
tion information on the subscriber terminal. 

4. A method according to claim 3, characterized in that the 
25 other information comprises at least one of the following parameters: receiving 

power of the serving cell, receiving power of at least one neighbouring cell, 
charge level of the battery in the subscriber terminal, information on the condi- 
tions at the location of the subscriber terminal, identity of a separate device 
connected to the subscriber terminal. 

30 5. A method according to any one of the preceding claims, char- 

acterized in that at least part of the information included in the request 
message received by the core network has been inserted into the request 
message by the subscriber terminal. 

6. A method according to any one of the preceding claims, char- 

35 acterized in that at least part of the information included in the request 
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message received by the core network has been inserted into the request 
message by the radio network. 

7. A method according to any one of the preceding claims, char- 
acterized in that if the function is location of the subscriber terminal, a 

5 special location procedure will be performed. 

8. A method according to claim 7, characterized in that the 
core network locates the subscriber terminal on the basis of the information 
included in the request message. 

9. A method according to claim 7, characterized in that the 
10 procedures required by the location service comprise receiving signals in the 

subscriber terminal and measuring them, or transmitting signals from the sub- 
scriber terminal. 

1 0. A method according to claim 9, characterized in that the 
signals received in the subscriber terminal for implementing the location ser- 

15 vice comprise signals transmitted by the radio system, including signals 
transmitted by other base stations of the radio system than by that of the serv- 
ing cell, or the signals transmitted by a satellite of the GPS system. 

11. A method according to any one of the preceding claims, 
characterized in that the network part of the radio system checks 

20 whether the location of the subscriber terminal carried out corresponds to the 
target set for the quality of service. 

1 2. A method according to claim 11, characterized in that if 
the target set for the quality of service is not achieved, the network part will 
perform a location service which offers a better quality of service. 

25 13. A method according to any one of the preceding claims, 

characterized in that tracing of the route travelled by the subscriber 
terminal is performed so that the subscriber terminal at regular intervals 
transmits a request message requesting location of the subscriber terminal. 

14. A method according to any one of the preceding claims, 
30 characterized in that tracing of the route travelled by the subscriber 

terminal is performed so that one parameter to be added to one location re- 
quest is a definition of the need to determine the location of the subscriber 
terminal at regular intervals. 

15. A method according to any one of the preceding claims, 
35 characterized in that the outside client of the radio system is informed 
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of the location of the subscriber terminal by the core network, by the sub- 
scriber terminal, or together by the core network and the subscriber terminal. 

16. A method according to any one of the preceding claims, 
characterized in that the response message contains at least one of 

5 the following pieces of information: the location of the subscriber terminal, lo- 
cation assistance data, a ciphering key for decrypting the location assistance 
data, the error code, information on whether the location information of the 
subscriber terminal is to be submitted to an outside client. 

17. A method according to any one of the preceding claims, 
10 characterized in that the request message and the response message. 

are messages of protocol layers that correspond to the third layer of the OSI 
model. 

18. A packet-switched radio system comprising: 

a network part of the radio system, which comprises a core network 
15 (CN) and a radio network (RAN) connected to the core network, 

a radio connection (240) from the radio network (RAN) to a sub- 
scriber terminal (UE); and 

the network part comprising location service means (182, 186) for 
locating the subscriber terminal (UE); 
20 characterized in that 

the subscriber terminal (UE) comprises means (194) for transmitting 
a request message for location service to the core network (CN) via the radio 
network (RAN); 

the network part comprises means for performing at least one func- 
25 tion required in the request message and means for transmitting a response 
message to the subscriber terminal (UE) via the radio network (RAN). 

19. A radio system according to claim 18, characterized in 
that the request message relates to one of the following location service func- 
tions: determination of the subscriber terminal location, informing of an outside 

30 client of the radio system of the subscriber terminal location, transmission of 
location assistance data to the subscriber terminal, transmission of a ciphering 
key for decrypting the location assistance data to the subscriber terminal. 

20. A radio system according to claim 18 or- 1 9, character- 
ized in that the information included in the request message comprises 

35 identity of the serving cell, and/or timing information on the radio connection, 
and/or other information on the radio system or on the subscriber terminal, 
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and/or desired quality of sen/ice of the requested location service, and/or the 
telecommunications address of the outside client who wants location informa- 
tion on the subscriber terminal. 

21 . A radio system according to claim 20, characterized in 
5 that the other information comprises at least one of the following parameters: 
receiving power of the serving cell, receiving power of at least one neighbour- 
ing cell, charge level of the battery in the subscriber terminal, information on 
the conditions at the location of the subscriber terminal, identity of . a separate 
device connected to the subscriber terminal. 
10 22. A radio system according to any one of claims 18 to 21, 

characterized in that the subscriber terminal comprises means (1 94) 
for inserting at least part of the information included in the request message 
received by the core network into the request message. 

23. A radio system according to any one of claims 18 to 22, 
15 characterized in that the radio network comprises means (118) for in- 
serting at least part of the information included in the request message re- 
ceived by the core network into the request message. 

24. A radio system according to any one of claims 18 to 23, 
characterized in that if the function is location of the subscriber termi- 

20 nal, a special location procedure will be performed. 

25. A radio system according to claim 24, characterized in 
that the core network comprises means for locating the subscriber terminal on 
the basis of the information included in the request message. 

26. A radio system according to claim 24, characterized in 
25 that the procedures required by the location service comprise receiving signals 

in the subscriber terminal and measuring them, or transmitting signals from the 
subscriber terminal. 

27. A radio system according to claim 26, characterized in 
that the signals received in the subscriber terminal to implement the location 

30 service comprise signals transmitted by the radio system, including signals 
transmitted by other base stations of the radio system than by that of the serv- 
ing cell, or the signals transmitted by a satellite of the GPS system. 

28. A radio system according to any one of claims 18 to 27, 
characterized in that the network part of the radio system comprises 

35 means for checking whether the location of the subscriber terminal carried out 
corresponds to the target set for the quality of service. 
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29. A radio system according to claim 28, characterized in 
that if the target set for the quality of service is not achieved, the network part 
will perform a location service which offers a better quality of service. 

30. A radio system according to any one of claims 18 to 29, 
5 characterized in that tracing of the route travelled by the subscriber 

terminal is performed so that the subscriber terminal at regular intervals 
transmits a request message requesting location of the subscriber terminal. 

31. A radio system according to any one of claims 18 to 29, 
characterized in that tracing of the route travelled by the subscriber 

10 terminal is performed so that one parameter to be added to one location re- 
quest is a definition of the need to determine the location of the subscriber 
terminal at regular intervals. 

32. A radio system according to any one of claims 18 to 31, 
characterized in that the outside client of the radio system is informed 

15 of the location of the subscriber terminal by the core network, by the sub- 
scriber terminal, or together by the core network and the subscriber terminal. 

33. A radio system according to any one of claims 18 to 32, 
characterized in that the response message contains at least one of 
the following pieces of information: the location of the subscriber terminal, lo- 

20 cation assistance data, a ciphering key for decrypting the location assistance 
data, an error code, information on whether location information on the sub- 
scriber terminal is to be submitted to an outside client. 

34. A radio system according to any one of claims 18 to 33, 
characterized in that the request message and the response message 

25 are messages of protocol layers that correspond to the third layer of the OSI 
model. 
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